Español

Privacy policy

Last updated: 1 October 2026

In short: your financial data is stored only on your phone, encrypted. We do not send it to any server (except the accounts you choose to share with your household, Pro plan), we do not sell data and the app shows no ads. If you create an account (optional), we store your email and your plan. Only if you agree, to improve the app we collect usage and crash statistics without amounts or descriptions.

1. Data controller

Controller of the «Mi Presupuesto Mensual» app (the “app”): Mi Presupuesto Mensual (España). For any privacy question write to privacidad@mipresupuestomensual.com.

2. Data that stays on your device

Everything you record in the app (income, expenses, accounts and balances, transfers, categories, limits, assets, debts, goals, contracted services and the activity history) is stored in a database encrypted with AES-256 on your phone. The encryption key is generated on the device and protected by the Android keystore; it never leaves the phone. We have no access to this data: the app does not sync or upload it to any server. The only exception is the accounts you mark as shared in a household (section 3.1).

• PIN and fingerprint/biometrics: the PIN is stored only as a salted cryptographic hash, never in plain text. Biometrics are handled by Android; the app only receives a “yes” or “no”.
• Activity history: records which action you performed (creation, edit, sign-in…) without amounts, descriptions or names. It keeps at most 365 days or 2,000 events.
• Attachments (Pro plan: photos of receipts, invoices, PDF policies…): they are stored encrypted in the app's private storage and deleted when you delete the transaction or asset. Photos you take with the camera from the app stay on the phone: they are not uploaded to any server, not saved to your gallery and their metadata (location, phone model) is removed before they are encrypted. The app does not ask for the camera permission: it uses the system camera app. If you choose “Save to Downloads”, the copy in that folder is unencrypted and under your control; if you open a PDF with another app or share an attachment, the app creates a temporary unencrypted copy in its cache that it deletes as soon as you return to it, and what you do in the target app is under your control.
• Settings (theme, language, reminders…): in the app's local preferences.
• Notifications: reminders and alerts are computed and scheduled on the phone; we use no push notifications or messaging servers. Those that include amounts are hidden on the lock screen.
• Home screen widget: shows the month's available amount; amounts are hidden unless you enable them in Settings.
• Backups (export): if you export your data, the app creates an unencrypted JSON file in your phone's Downloads folder. That file is under your control: keep it somewhere safe and delete it when you no longer need it. The full backup with files (a .zip with your data and attachments) is encrypted with a password you choose, which is not stored anywhere: without it the backup cannot be opened or restored. Importing only reads the file you choose.

This data is kept until you delete it (Settings → “Delete all data”) or uninstall the app.

3. Account (optional)

You can use the app without an account. If you decide to create one, you do so with email and password or with your Google account, through our authentication provider Supabase. We process:

• Your email address and a random user identifier.
• Your password, which Supabase stores hashed (the app does not store it).
• With Google: the email, name and profile photo address that Google shares when you sign in, and your Google account identifier. The photo is downloaded directly from Google's servers to show it in Settings.
• Your account's plan (no account, registered or Pro) and the sign-up and last sign-in dates.
• Technical security data logged by the provider when you sign in (IP address, date and result of the attempt) to prevent abuse.

The account identifies you and applies your plan's limits. Your financial data is not stored in the account. Legal basis: performance of the contract (the terms of use) you accept when signing up.

3.1 Shared household (optional, Pro plan)

If you create or join a household, you share with its members only the accounts you mark as shared. To do so we process, at our provider Supabase:

• The household name, its members (user identifier, email and role) and pending invitations (invited email, code and expiry, 7 days).
• The data of the shared accounts, which the app syncs automatically: the account (name, icon, colour and opening balance) and its transactions (amounts, descriptions, notes, dates, category and group names, fixed expenses, recurring income with their months, balance adjustments, transfers it takes part in and linked services with their visits and payments), who created them and who last changed them and when. For a transfer between a shared account and a personal one only the shared side is uploaded: the personal account never leaves the phone.

All household members can see that data. Your non-shared accounts and the rest of your data stay only on your phone. On the server, shared data is protected by per-household access rules (only members can read it), encryption in transit (HTTPS) and the provider's encryption at rest; it is not end-to-end encrypted, so the provider could technically access it. If you leave the household, stop sharing an account or are removed, the others stop receiving changes, but whatever they already downloaded stays on their phones. When you leave the household, the app removes from your phone the accounts other members shared with you. Categories travel by name: if a member doesn't have one, their app creates it. Legal basis: performance of the contract (you request it when you create a household, invite, join or share an account).

There are currently no payments in the app. If the Pro plan becomes paid in the future, payments will be handled by Google Play; we will not see your payment details.

4. Usage and crash statistics

In the versions distributed through Google Play we use Firebase Analytics and Firebase Crashlytics (Google) to learn which features are used and which errors happen, only if you agree. They are off until you answer “Yes” to “Share usage statistics and crash reports?”, which the app asks when you start using it; if you answer “No”, nothing is sent. You can change it at any time in Settings → Privacy: when you turn it off, the app stops sending data and deletes from the phone whatever was waiting to be sent. If you agree, we collect:

• Usage events: a closed catalogue of actions (opening the app, confirming a payment, exporting…) with technical parameters such as “yes/no” or the error type. They never include amounts, balances, descriptions or other financial data. Firebase adds its automatic events (first open, session, screen view) and device data (model, Android version, language, approximate country and app version).
• Identifier: a random installation identifier generated by the app; if you sign in, your account identifier. We do not use the advertising ID: its collection is disabled and the permission is removed from the app.
• Crash reports: only the error type and the technical stack trace, together with the Android model and version, app version, free memory and disk, orientation and whether the device is rooted. The error message is not sent because it could contain your data. They are identified by the installation identifier, never by your account.

Legal basis: your consent, which you can withdraw at any time in Settings → Privacy (without affecting what was sent before). We also apply the safeguards described (no financial data and pseudonymous identifiers). Events are kept for the period configured in Firebase (at most 14 months) and crash reports for 90 days.

5. Other services

• Updates: the app asks Google Play whether a new version is available (Google Play in-app updates API). It sends us no data.
• What's new and legal pages: the app downloads the list of changes from our content server (Amazon Web Services), which receives the IP address needed to deliver the file. We keep no access logs and use no cookies or trackers on these pages.
• No advertising and no sale or sharing of data with third parties for commercial purposes.

6. Processors and international transfers

Some of these providers are based in the United States, so the processing may involve international transfers of data. They are carried out with the safeguards provided by the GDPR: the EU-U.S. Data Privacy Framework when the provider is certified and, otherwise, the European Commission's standard contractual clauses.

7. Retention

• Data on your phone: until you delete it or uninstall the app.
• Account: while it exists. When you delete it, the account and the plan are deleted immediately; the provider's backups are rotated within 30 days at most.
• Shared household: while the household exists. When you leave, your membership is deleted; when no members are left, the household and its data are deleted. Invitations expire after 7 days; deleted records may be kept as a deletion marker (without content) for up to 180 days.
• Statistics and crashes: the periods in section 4.
• Emails you send us: as long as needed to help you and, afterwards, during the legal limitation periods.

8. Your rights

You can exercise your rights of access, rectification, erasure, restriction, portability and objection by writing to privacidad@mipresupuestomensual.com from your account's email. We will reply within one month. In addition:

• You can withdraw your consent to usage statistics and crash reports in Settings → Privacy.
• You can delete your account from the app: Settings → Account → “Delete my account” (how to do it).
• Portability of your financial data is available in the app itself through the JSON export (depending on your plan) or by email request.
• If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or your local authority.

9. Security

AES-256 encryption of the local database, keys in the Android secure store, optional PIN or biometric lock, optional protection against screenshots and always-HTTPS communications. Shared household data can only be read by that household's members (server-side access rules).

10. Children

The app is not directed to children under 16 and we do not knowingly collect their data. If you believe a child has given us data, write to us and we will delete it.

11. Changes to this policy

If we change this policy, we will update the date above and, if the change is significant, announce it in the app's “What's new”.